Instructure confirms data breach, ShinyHunters claims attack
2026-05-04T01:23:40Z•da5a687f5a7a5bfc9c8ad1089ba1c1de68f6fc39bc8f2d18973d52d5785839f4
AI-assisted-phishingAndroid malwareAzureBluekitCVE-2026-41940ConsentFix v3DigiCertFrance Titres (ANTS) arrestInstructureMicrosoft DefenderOAuth abuseShinyHuntersSorry ransomwareTelegram Mini AppsTrojan:Win32/Cerdigent.A!dhacPanelcertificate-removalcrypto-scamdata-breachextortionfalse-positiveimpersonationmass-exploitationphishingphishing-kit
What happened
Multiple security incidents and trends reported: Instructure confirmed a data theft incident with the ShinyHunters extortion gang claiming responsibility; Microsoft Defender is producing widespread false positives by flagging legitimate DigiCert root certificates as Trojan:Win32/Cerdigent.A!dha and in some cases removing certificates; Telegram Mini Apps are being abused to run large-scale crypto scams, impersonation campaigns, and deliver Android malware; a critical cPanel vulnerability (CVE-2026-41940) is being mass-exploited in "Sorry" ransomware attacks to breach and encrypt websites; a new
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- bleepingcomputer
- Record identifier
- da5a687f5a7a5bfc9c8ad1089ba1c1de68f6fc39bc8f2d18973d52d5785839f4
- Enrichment time
- 2026-05-04T01:23:40Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.